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Figure 2 
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Sending a file block 



Browser requests to download Java ™ 
Applet 



Applet is downloaded with all the 
parameters q, a, b, r, G which define 
Ecliptic Crave (EC) 



Generate shared secret key (K.) using Mendez-Qu-Vanstone public key agreement 
scheme with cofactor multiplication 



Encrypt file block 
(FB) using symmetric 
encryption algorithm 
(such as Blowfish or 
Triple DES) with K 
K(FB) 



K(FB) | 
► 



Save encrypted file 
block K(FB), and the 
key K in SecureDoc 
database 



Receiving a file block 



Client 


Browser requests to 
download Java ™ Anolet fc 

Applet is downloaded with all the 

parameters q, a, b, r, G which 
^■dsfineP-cliptic Curve (RQ 


Server 


Generate shared secret key (Kec) using Mendez-Qu-Vanstane public key agreement 
scheme with cofactor multiplication (see MQVC Key Agreement scheme) 





Decrypt K E c(K) using Kb: 
K = K EC {K E c(K)) 



Decrypt File Block with K 
FB = K ( K (FB) ) 



Kh C (K) 



Confirmation and request 
to send file block 



Send file block 
encrypted with K 
K(FB) 



Get Key K from SecureDoc 
database 

Encrypt K with Kec 
KecCK) 



Mendez-Qu-Vanstone Key Agreement - version with cofactor multiplication (MQVC) 
(According to IEEE P1363 draft February S, 1999) 



public/private key 
pair 
(a, A) 



Choose random x 

Generate 
public/private key 
pair 
(x, 3Q, where 
X=xG 



Calculate 
S A =(x+X'a) mod n 



Calculate common 
shared secret key 
K=hS A (y-i-Y'b) 

Where and h 
are calculated from 
the EC parameters 



Generate 
public/private 
key pair 
(b,B) 



Choose random y 

Generate 
public/private key 
pair 
(y, Y), where 
Y=yG 



Calculate 
S B =(y+Y'b) mod n 



Calculate common 
shared secret key 

K=hS B (x+X'a) 

Where 5T and h 
are calculated from 
the EC parameters 



